• info
• discussion
• exploit
• solution
• references

Juergen Schoenwaelder scotty ntping Buffer Overflow Vulnerability

Solution:
The vendor has released a fixed version, 2.1.11. S.u.S.E. has released upgraded packages.


Juergen Schoenwaelder Scotty 2.1.10

• Juergen Schoenwaelder scotty-2.1.11.tar.gz
  ftp://ftp.ibr.cs.tu-bs.de/pub/local/tkined/scotty-2.1.11.tar.gz


• S.u.S.E. 6.3 alpha scotty-2.1.10-274.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.3/tcl2/scotty-2.1.10-274.alph a.rpm


• S.u.S.E. 6.3 i386 scotty-2.1.10-314.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.3/tcl2/scotty-2.1.10-314.i38 6.rpm


• S.u.S.E. 6.4 alpha scotty-2.1.10-272.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.4/tcl2/scotty-2.1.10-272.alph a.rpm


• S.u.S.E. 6.4 i386 scotty-2.1.10-314.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.4/tcl2/scotty-2.1.10-314.i38 6.rpm


• S.u.S.E. 7.0 alpha scotty-2.1.10-273.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.0/tcl2/scotty-2.1.10-273.alph a.rpm


• S.u.S.E. 7.0 i386 scotty-2.1.10-315.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.0/tcl2/scotty-2.1.10-315.i38 6.rpm


• S.u.S.E. 7.0 ppc scotty-2.1.10-274.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.0/tcl2/scotty-2.1.10-274.ppc. rpm


• S.u.S.E. 7.0 sparc scotty-2.1.10-268.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.0/tcl2/scotty-2.1.10-268.sp arc.rpm